GHSA-6X93-H9G3-9PHR otp-generator before v3.0.0 insecurely generates random one-time passwords

The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which may allow a brute-force attack...

CVE-2021-23451

The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which may allow a brute-force attack...

Design/Logic Flaw

The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which may allow a brute-force attack...

CVE-2021-23451 Insecure Randomness

The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which may allow a brute-force attack...

CVE-2021-23451

CVE-2021-23451 affects otp-generator prior to 3.0.0, where insecure randomness in the one-time password generation can enable brute-force attacks. Public sources in connected documents consistently describe insecure random number generation (Math.Random) as the root cause, leading to predictable ...

CVE-2021-23451

The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which may allow a brute-force attack...

CVE-2021-23451: Use of Insufficiently Random Values

The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which may allow a brute-force attack...

PT-2022-9398 · Unknown · Otp-Generator

Name of the Vulnerable Software and Affected Versions: otp-generator versions prior to 3.0.0 Description: The issue is related to insecure randomness in the generation of one-time passwords, which could potentially allow a brute-force attack. Recommendations: For versions prior to 3.0.0, update t...

otp-generator 安全特征问题漏洞

otp-generator is a simple one-time password generator from the individual developer Maheshkumar Kakade. A security vulnerability exists in otp-generator versions prior to 3.0.0 that stems from insecure random one-time passwords being generated.The package is susceptible to insecure randomization,...

CrackQL - GraphQL Password Brute-Force And Fuzzing Utility

CrackQL is a GraphQL password brute-force and fuzzing utility. CrackQL is a versatile GraphQL penetration testing tool that exploits poor rate-limit and cost analysis controls to brute-force credentials and fuzz operations. How it works? CrackQL works by automatically batching a single GraphQL...

PT-2022-31070

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns an out-of-bounds access in otp packed element t. It was introduced in version v5.16 and fixed in Linux Kernel version v5.18.3. The actual impact and attack plausibility have...

PT-2022-31406

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns an out-of-bounds access in otp packed element t. It was introduced in version v5.16 and fixed in Linux Kernel version v5.17.14. The actual impact and attack plausibility ha...

CVE-2022-1994

The Login With OTP Over SMS, Email, WhatsApp and Google Authenticator WordPress plugin before 1.0.8 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

Cross site scripting

The Login With OTP Over SMS, Email, WhatsApp and Google Authenticator WordPress plugin before 1.0.8 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-1994 Google Authenticator < 1.0.8 - Admin+ Stored Cross-Site Scripting

The Login With OTP Over SMS, Email, WhatsApp and Google Authenticator WordPress plugin before 1.0.8 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-1994

CVE-2022-1994 concerns the Google Authenticator WordPress plugin (

PT-2022-14246

Name of the Vulnerable Software and Affected Versions Login With OTP Over SMS, Email, WhatsApp and Google Authenticator WordPress plugin versions prior to 1.0.8 Description The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks, even when the unfiltered htm...

CVE-2022-1994: Improper Neutralization of Input During Web Page Generation

The Login With OTP Over SMS, Email, WhatsApp and Google Authenticator WordPress plugin before 1.0.8 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

WhatsApp accounts hijacked by call forwarding

In a short post on LinkedIn Rahul Sasi, founder and CEO of CloudSEK, explains how WhatsApp account takeovers are possible. The methods consists of several steps and it takes some social engineering skills, but it’s good to be aware of the possibility and how it works. It starts with the threat...

New WhatsApp OTP Scam Allows Scammers to Hijack Your Account

By Deeba Ahmed The new WhatsApp scam is currently targeting users in India. On May 23rd, 2022, the founder and CEO… This is a post from HackRead.com Read the original post: New WhatsApp OTP Scam Allows Scammers to Hijack Your Account...